Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft
File:                     02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft (raw, json)
Hash identifier:          5J2YcaSzwTwUZxwKOggabSVwYPJVoEZS+16wh79RLIo=
Subject key identifier:   92:D0:84:FE:B0:E4:BD:59:29:D1:6C:31:1F:3D:C2:0B:AE:52:A2:59
Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18
Certificate issuer:       /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
Certificate serial:       5A0DFF99BC9C66A06F4A9D98C33C52D6F7B8D2FA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft
Manifest number:          04A6
Signing time:             Fri 31 Jan 2025 15:30:43 +0000
Manifest this update:     Fri 31 Jan 2025 15:25:43 +0000
Manifest next update:     Tue 04 Feb 2025 00:25:43 +0000
Files and hashes:         1: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl (hash: D8ivdsvrSZCmwlojb1oXzB40p3VlD9MhbHZdibxuF4Q=)
                          2: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (hash: DXanr9rCtx6i+k0G2tD3+Tmn8iY0iPRqbe6UxiR1gjo=)
                          3: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (hash: 9l77c+ELVpnt8sBa7r5sdntlRqnRcBIJIYmt6ZvAHvU=)
                          4: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (hash: /WX8yCA5eyBT7h+J3vED28wdO9GDpBxOkwzal/IJark=)
                          5: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (hash: AX4Jn83p+r0+t8Humc/TBfXoxrYw8H5KgdJEdvTF/+E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0d:ff:99:bc:9c:66:a0:6f:4a:9d:98:c3:3c:52:d6:f7:b8:d2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
        Validity
            Not Before: Jan 31 15:25:43 2025 GMT
            Not After : Feb  4 00:25:43 2025 GMT
        Subject: CN=92D084FEB0E4BD5929D16C311F3DC20BAE52A259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:94:89:38:e4:75:49:08:e6:a8:ef:f7:f6:d3:
                    31:fd:52:b9:f2:d4:46:2c:89:5c:37:32:a7:b3:6c:
                    6d:d8:b6:a4:aa:5c:41:74:fb:2a:a2:6e:95:31:6e:
                    63:a3:b5:8a:62:78:fc:89:b0:e6:e2:c6:06:3f:0a:
                    47:e1:1f:26:ad:48:3e:80:42:57:3e:72:a8:c3:23:
                    69:d0:46:45:eb:35:f0:81:65:e9:98:1d:a9:41:02:
                    fc:06:5a:df:f4:06:23:91:b5:ea:d8:a8:80:b8:49:
                    3e:de:8d:f2:e8:ac:41:fd:94:eb:17:40:13:6f:2e:
                    fa:02:54:e6:f4:f0:e8:61:fc:23:18:7c:8e:2c:b0:
                    f6:46:91:8a:7c:f7:1f:5b:a4:65:74:8e:6d:6e:fc:
                    47:7e:b0:5b:24:75:17:22:dd:53:e0:2a:b0:e0:6d:
                    bd:8e:f3:50:9b:a5:5d:4f:c3:d4:01:92:54:ce:ec:
                    8c:fb:98:38:f4:dc:f7:1a:2d:50:4a:c9:f3:a2:51:
                    ce:b4:cc:dc:6b:c0:fb:1e:0b:fc:69:70:c9:2e:00:
                    62:3f:dd:86:be:31:bd:ff:a5:7a:9c:d3:83:9e:03:
                    d3:7e:cc:2b:d3:d8:d1:09:a4:54:3a:34:67:e8:a4:
                    a4:2f:bf:0f:9b:11:4e:e0:0d:6e:f2:fb:54:8b:22:
                    76:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D0:84:FE:B0:E4:BD:59:29:D1:6C:31:1F:3D:C2:0B:AE:52:A2:59
            X509v3 Authority Key Identifier:
                keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:81:87:72:20:f9:c5:ef:fb:63:a8:5e:60:06:e3:d2:5f:6b:
         fb:5e:a5:da:f2:33:1d:c4:2b:c8:52:7a:e5:b0:5b:07:c4:8c:
         87:61:bc:93:d6:89:1c:00:79:fe:a6:10:ea:83:a5:30:65:27:
         96:aa:d3:7e:08:31:ad:70:d6:00:9b:e8:d4:b4:d3:38:11:57:
         5a:c9:cf:8f:6c:ec:83:fa:f3:ba:0b:72:b4:7c:c9:8b:f6:98:
         d4:0d:90:b7:72:8d:b6:a1:31:33:d4:6d:e5:27:78:09:ec:60:
         39:e8:b5:7e:3c:57:df:d1:19:0b:eb:ab:3a:3e:49:d2:55:d8:
         06:2d:90:f9:e1:65:e9:75:0f:12:10:48:7f:11:e7:cc:ae:99:
         62:71:63:67:14:1e:fb:5a:cf:73:ef:0c:6a:5f:95:80:4c:f5:
         f6:44:a1:17:74:ad:d7:4f:cd:8b:17:d4:3e:f4:bf:78:a5:b4:
         fb:b8:f0:41:74:e7:51:ce:16:f0:1b:7b:60:17:da:dd:72:fa:
         fd:3d:56:ce:35:f8:bc:4d:86:7a:66:29:f8:a0:54:c6:c4:60:
         d7:71:07:ad:e4:45:f3:d2:76:f0:9c:85:18:0d:0c:fe:71:a8:
         8c:df:ce:91:2e:09:40:86:c7:11:16:38:c0:cb:3b:9b:97:ff:
         b0:1c:98:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----